e83dcd080b7f68986ecf884fe6a820e2ab080ce902b4dc77d612d3cd3d54d992 | Triage

Sharing

General

Target

e83dcd080b7f68986ecf884fe6a820e2ab080ce902b4dc77d612d3cd3d54d992
Size

924KB
Sample

221124-j5emxsdg3x
MD5

748b356a5f4fdf4d216a67ac930f63d3
SHA1

c2b88419702cbc8bcda0419ade0148a7cfe23bb0
SHA256

e83dcd080b7f68986ecf884fe6a820e2ab080ce902b4dc77d612d3cd3d54d992
SHA512

46a84832b250429be16a24a5f0498c011d9d27bb2c2f5e73b0028292343d1c203da2fcfa3976f984b8e64ebc699383dd4d40a451e6472a4d25dddbae9dc8abbb
SSDEEP

24576:h1OYdaOBfC5S9N6w6EVX1Lh+mN5Z4E8IlIyYuXF:h1OsoMN6wdBh5N5Z4E8PuXF

Score

8^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  e83dcd080b7f68986ecf884fe6a820e2ab080ce902b4dc77d612d3cd3d54d992
- Size
  
  924KB
- MD5
  
  748b356a5f4fdf4d216a67ac930f63d3
- SHA1
  
  c2b88419702cbc8bcda0419ade0148a7cfe23bb0
- SHA256
  
  e83dcd080b7f68986ecf884fe6a820e2ab080ce902b4dc77d612d3cd3d54d992
- SHA512
  
  46a84832b250429be16a24a5f0498c011d9d27bb2c2f5e73b0028292343d1c203da2fcfa3976f984b8e64ebc699383dd4d40a451e6472a4d25dddbae9dc8abbb
- SSDEEP
  
  24576:h1OYdaOBfC5S9N6w6EVX1Lh+mN5Z4E8IlIyYuXF:h1OsoMN6wdBh5N5Z4E8PuXF
Score

8^/10

discovery spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Drops Chrome extension
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Query Registry

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealer

behavioral2

discoveryspywarestealer